| type cros_rootdev, domain, chromeos_domain; |
| |
| domain_auto_trans_nnp(cros_chromeos_install, cros_rootdev_exec, cros_rootdev) |
| domain_auto_trans_nnp(cros_is_running_from_installer, cros_rootdev_exec, cros_rootdev) |
| domain_auto_trans_nnp(cros_os_install_service, cros_rootdev_exec, cros_rootdev) |
| |
| allow cros_rootdev { |
| cros_chromeos_install |
| cros_is_running_from_installer |
| cros_os_install_service |
| }:fd use; |
| allow cros_rootdev { |
| cros_chromeos_install |
| cros_is_running_from_installer |
| cros_os_install_service |
| }:fifo_file rw_file_perms; |
| |
| allow cros_rootdev device:blk_file getattr; |
| allow cros_rootdev sysfs:dir read; |
| allow cros_rootdev sysfs:file read; |
| allow cros_rootdev sysfs_dm:dir r_dir_perms; |
| allow cros_rootdev sysfs_dm:file read; |
| allow cros_rootdev sysfs_loop:dir search; |
| allow cros_rootdev sysfs_loop:file read; |
